Container Service for Kubernetes:Access the console with a custom domain name

Step 1: Configure a CNAME record

1. Log on to your DNS provider and add a CNAME record that points the custom domain name to the default domain name of the Workflow Clusters.

   The default domain name of a workflow cluster follows this format: argo.${your-workflow-cluster-id}.${region}.alicontainer.com.

   • ${your-workflow-cluster-id}: Replace it with your Workflow Clusters ID.

   • ${region}: Replace it with the region where the Workflow Clusters resides.

2. Run the following command to verify that the CNAME record takes effect:

   dig <your-domain>

   ANSWER SECTION in the output contains the default domain name of the workflow cluster, the CNAME record is configured correctly.

Step 2: Configure the SSL certificate

Configure an SSL certificate in the Workflow Clusters so that browsers trust your custom domain name.

1. After downloading the SSL certificate, run the following command to create a Secret named argo-server-tls in the Workflow Clusters.

   Replace ${your-workflow-cluster-id} with your workflow cluster ID.

   kubectl create -n ${your-workflow-cluster-id} secret tls argo-server-tls \
     --cert=/path/to/cert.pem \
     --key=/path/to/key.pem

2. Run the following command to verify that the Secret is created:

   kubectl -n ${your-workflow-cluster-id} get secret argo-server-tls

3. Run the following command to edit the argo-server deployment.

   Replace ${your-workflow-cluster-id} with your workflow cluster ID.

   kubectl -n ${your-workflow-cluster-id} edit deploy argo-server

4. Add the following configuration to the argo-server deployment specification.

   --tls-certificate-secret-name=argo-server-tls

Step 3: Configure the OAuth callback URL

Set the callback URL of the OAuth application in RAM to the custom domain name.

1. Log on to the Resource Access Management (RAM) console as a RAM administrator.

2. In the left-side navigation pane, choose Integrations > OAuth (Preview).

3. On the Enterprise Applications tab, click the application ackone-argo-${your-workflow-cluster-id}@app.${your-uid}.onaliyun.com, where ${your-workflow-cluster-id} is your Workflow Clusters ID and ${your-uid} is your Alibaba Cloud account ID.

4. In the Basic Information section, click Modify Basic Information and change Callback URL to https://${your-domain}:2746/oauth2/callback, where ${your-domain} is your custom domain name.

Step 4: Access the console

1. Enter https://${your-domain}:2746 in your browser.

2. Log on with a cloud single sign-on account.

   The Workflow Clusters console appears, which indicates that the custom domain name is configured and the workflow cluster is accessible.